Norton Internet Security / Norton AntiVirus

[grajackgor]

My daughters account is sending unsolicited invites to contacts to visit various sites which have porn descriptions. NIS 2009 does not pick up any recent virus activity. what do I do. I presume my daughter picked up the infection from following a similar link or running an attachment. She can't remember though

[Quads]

Could you send me a personal message with what exactly the link that you would click says??

Quads 

[reese_anschultz]

grajackgor, how do you know that your daughter's account is sending the invitations? Do see anything in the sent mail folder? Are you seeing NIS notifications of scanning outbound e-mail? Can you get a copy of one of the e-mails and provide the text without any links?

[Quads]

Hi

The link goes to a site to enter your Msn username and password (Phishing??) 

Try SuperAntispyware Free http://www.superantispyware.com/download.html  Install, Update Definitions, and run a Full Scan 

There is also http://download.cnet.com/Clean-Virus-MSN/3000-2239_4-10836867.html

Quads 

[grajackgor]

A number of her contacts have said they have received variations on the link I have just sent.As well I have an MSN Messenger account and have received 3 similiar but slightly different links all look dubious. It seems the link appears and then she goes off line just as quickly

(18:03) Hannah: PEOPLE WITH SAME INTEREST
[Removed] (18:03) Hannah is now Offline

[edit: removed link per the Participation Guidelines and Terms of Service. Please do not post links to pornographic websites.]

Message Edited by Tim_Lopez on 04-22-2009 03:43 PM

[grajackgor]

I will run tomorrow and let you know

Bedtime in the UK

Thanks

[reese_anschultz]

If your daughter's machine is infected, Quads has put you on the right track to solving the problem.

Another possibility is that some associate of your daughter's has been infected. Most malicious e-mail worms spoof the return address on e-mails using a random address from the infected machine's address book.

[Garret_Polk]

It is also possible that someone has hacked the account and is sending emails from another location. You should change the password on the account and see if that helps.

[Allen_K]

---

Garret_Polk wrote:
It is also possible that someone has hacked the account and is sending emails from another location. You should change the password on the account and see if that helps.

---

If her machine is also possibly infected, I would also recommend logging in from another machine to change the password.  Also don't use the new password on the possibly infected computer until your sure there is no infection.

[grajackgor]

Finally got round to downloading, updating and running the Superantispyware link that quad provided. It cam up with a whole load of tracking cookies including the Norton one. Nothing else though. I will try the other link this evening.